[Debian-med-packaging] Bug#1099933: autopkgtest requires internet and ca-certificates

Stefano Rivera stefanor at debian.org
Sun Mar 9 16:00:54 GMT 2025


Source: sra-sdk
Version: 3.0.9+dfsg-7
Severity: normal
Tags: patch

The autopkgtest of sra-sdk requests data from the Internet using https, 
however this isn't declared, and there's no requirement to have 
ca-certificates.

Log:
autopkgtest [11:11:57]: test run-unit-test: [-----------------------
>>>>>Decompressing test-data archive...
dbGaP-0/
dbGaP-0/SRR2042184.fasta
meta/
meta/prj_phs710EA_test.ngc
meta/SRR6650398_experiment.xml
meta/SRR6650398.bam
meta/SRR2042184_run.xml
meta/SRR2042184_experiment.xml
meta/SRR6650398_illumina_run.xml
meta/SRR7032226_run.xml
meta/SRR7032226_experiment.xml
meta/reference.fna
meta/SRR6650398_fastq_run.xml
public/
public/nannot/
public/wgs/
public/refseq/
public/refseq/NC_000962.3
public/sra/
public/sra/SRR7032226.sra
public/sra/SRR6650398.sra
public/sra/SRR2042184.sra
public/files/
>>>>>Running test-sra...
2025-03-09T15:11:58 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:58 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'trace.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:58 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:58 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'trace.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:58 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:58 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'ftp-trace.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:59 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:59 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'ftp-trace.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:59 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:59 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'ftp-trace.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:59 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:59 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'locate.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:59 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:59 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'sra-download.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:11:59 test-sra.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:11:59 test-sra.3.0.9 sys: mbedtls_ssl_get_verify_result for 'sra-download.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
>>>>>Running vdb-config...
>>>>>Running cache-mgr...
-----------------------------------
0 cached file(s)
3 complete file(s)
1,800,745 bytes in cached files
1,800,745 bytes used in cached files
0 lock files
>>>>>Running srapath...
/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR2042184.sra
/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR6650398.sra
/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR7032226.sra
>>>>>Running prefetch...

2025-03-09T15:11:59 prefetch.3.0.9: '/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR2042184.sra' is a local non-kart file

2025-03-09T15:11:59 prefetch.3.0.9: '/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR6650398.sra' is a local non-kart file
2025-03-09T15:12:01 prefetch.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:12:01 prefetch.3.0.9 sys: mbedtls_ssl_get_verify_result for 'locate.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
2025-03-09T15:12:01 prefetch.3.0.9: '/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR6650398.sra' has 0 unresolved dependencies

2025-03-09T15:12:01 prefetch.3.0.9: '/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR7032226.sra' is a local non-kart file
2025-03-09T15:12:01 prefetch.3.0.9: '/tmp/autopkgtest.T7fAqv/autopkgtest_tmp/public/sra/SRR7032226.sra' has 0 unresolved dependencies
>>>>>Running fastq-dump...
2025-03-09T15:12:02 fastq-dump.3.0.9 sys: encryption failed while validating token within cryptographic module - Verification issue 0x4008 for this certificate: (  cert. version     : 3  serial number     : 00  issuer name       : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  subject name      : C=US, O=The Go Daddy Group\, Inc., OU=Go Daddy Class 2 Certification Authority  issued  on        : 2004-06-29 17:06:20  expires on        : 2034-06-29 17:06:20  signed using      : RSA with SHA1  RSA key size      : 2048 bits  basic constraints : CA=true  )
2025-03-09T15:12:02 fastq-dump.3.0.9 sys: mbedtls_ssl_get_verify_result for 'locate.ncbi.nlm.nih.gov' returned 0x4008 ( !! The certificate is not correctly signed by the trusted CA  !! The certificate is signed with an unacceptable hash. )
Failed to call external services.
autopkgtest [11:12:03]: test run-unit-test: -----------------------]
autopkgtest [11:12:03]: test run-unit-test:  - - - - - - - - - - results - - - - - - - - - -
run-unit-test        FAIL non-zero exit status 64

Trivial patch:

diff -Nru sra-sdk-3.0.9+dfsg/debian/tests/control sra-sdk-3.0.9+dfsg/debian/tests/control
--- sra-sdk-3.0.9+dfsg/debian/tests/control	2024-10-17 22:48:06.000000000 -0400
+++ sra-sdk-3.0.9+dfsg/debian/tests/control	2025-03-09 10:33:36.000000000 -0400
@@ -1,3 +1,3 @@
 Tests: run-unit-test
-Depends: @
-Restrictions: allow-stderr
+Depends: @, ca-certificates
+Restrictions: allow-stderr, needs-internet



More information about the Debian-med-packaging mailing list